Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa
File:                     3137372e39332e3134342e302f32332d3233203d3e203532383631.roa (raw, json)
Hash identifier:          uGHA2/eZp7BgYsRbUknzT+t4fVB/RV+yq23t1UG+PvY=
Subject key identifier:   CE:ED:BC:F5:92:61:CB:7C:E9:4C:16:C0:13:B6:02:1E:37:9E:FA:2F
Certificate issuer:       /CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
Certificate serial:       5B0368B45E3688AB487A53A9C9C7E955E82777DD
Authority key identifier: 08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa
Signing time:             Tue 27 Oct 2026 15:46:35 +0000
ROA not before:           Tue 27 Oct 2026 15:41:35 +0000
ROA not after:            Tue 26 Oct 2027 15:46:35 +0000
asID:                     52861
IP address blocks:        177.93.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl
                          rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Oct 2026 23:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:03:68:b4:5e:36:88:ab:48:7a:53:a9:c9:c7:e9:55:e8:27:77:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088FBECC3D734875CDC23B55B9E5092EA27DF270
        Validity
            Not Before: Oct 27 15:41:35 2026 GMT
            Not After : Oct 26 15:46:35 2027 GMT
        Subject: CN=CEEDBCF59261CB7CE94C16C013B6021E379EFA2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:f7:ab:b1:98:9d:51:b2:47:1f:8a:4e:fd:
                    f9:08:0e:b8:03:ab:0f:ee:e3:08:93:4e:cc:79:ca:
                    50:af:9f:d1:dc:b8:c2:79:ab:42:5f:55:91:d1:d4:
                    7e:eb:5d:76:b6:92:66:29:4e:6e:03:dc:00:64:6e:
                    19:26:a0:bc:db:91:05:43:71:91:9c:02:a4:db:db:
                    4b:4e:e9:fc:fb:b9:a1:b7:84:44:f7:fc:22:98:1a:
                    da:d2:89:b2:ec:77:4e:db:61:ed:cf:dd:d1:5c:24:
                    7a:bc:64:5e:3e:52:19:e3:33:c0:bf:11:af:0a:34:
                    21:56:fa:7b:6f:d0:f3:07:17:79:18:84:6b:4f:ba:
                    e5:ae:cb:14:2a:1b:cc:f0:0f:5a:bc:75:71:12:e2:
                    e3:7f:b6:ca:a2:79:f8:3e:7f:a2:78:4b:e6:e0:18:
                    03:84:c6:2d:b8:ae:2e:af:19:cc:e5:97:04:da:2d:
                    f5:51:94:d4:8d:7e:f2:06:e6:fe:7c:fe:d0:fa:4c:
                    a4:5b:5a:c8:46:44:63:18:34:17:7d:e9:81:16:89:
                    79:38:53:d1:50:c1:14:c5:65:a8:60:58:d9:23:8d:
                    ed:8f:1f:74:2a:73:6b:67:b4:4e:44:4f:d2:a1:d3:
                    28:86:65:3e:c7:fb:b6:ac:1d:40:67:88:16:1c:a8:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:ED:BC:F5:92:61:CB:7C:E9:4C:16:C0:13:B6:02:1E:37:9E:FA:2F
            X509v3 Authority Key Identifier:
                keyid:08:8F:BE:CC:3D:73:48:75:CD:C2:3B:55:B9:E5:09:2E:A2:7D:F2:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/088FBECC3D734875CDC23B55B9E5092EA27DF270.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/088FBECC3D734875CDC23B55B9E5092EA27DF270.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1uUWiUknRDSWP33fSH5nK7LfwM9MP1cgevKV59xhAKX/0/3137372e39332e3134342e302f32332d3233203d3e203532383631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.93.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:1d:3c:6f:68:aa:6e:6e:06:65:ba:5d:d1:0e:c0:7e:e7:ca:
         d9:21:e1:7a:a1:97:85:10:40:c5:4c:fa:8b:79:00:16:20:de:
         e0:b9:04:81:1c:c8:7d:9d:2e:80:bb:3a:4a:08:cc:dc:07:41:
         de:99:7a:d2:de:fe:09:46:b2:83:a2:f6:45:5f:98:99:7b:2f:
         93:65:66:5b:5e:09:2e:e2:a2:64:04:67:f4:bd:b1:19:bb:4c:
         52:16:b2:da:b0:db:c7:2d:86:dd:e3:8e:81:4d:d6:1a:29:af:
         3e:ad:00:87:43:20:34:9c:58:16:47:77:d9:1a:35:e5:7d:4d:
         ba:88:d8:19:43:b7:82:c7:37:40:a2:a3:45:43:dc:d7:bf:cf:
         82:2a:4c:44:70:4f:4d:4c:2d:11:f4:cc:ea:71:20:be:af:bb:
         ed:a1:65:3e:64:8c:f2:35:0a:42:23:50:75:4a:fe:78:59:fd:
         7c:35:c1:95:2b:d9:5f:78:b7:dd:e0:a3:ef:bc:41:af:68:43:
         ba:2e:2b:05:a5:42:22:b6:ab:d2:2e:91:44:de:8b:44:10:ce:
         ba:97:92:05:1d:16:fa:fb:87:e2:d2:f1:02:c2:c5:53:0c:ed:
         03:87:52:b7:89:e0:82:62:08:90:1a:a0:fa:0c:e6:fb:a0:26:
         28:e4:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:36:54 2026 by rpki-client